8.6
Élevée
CVE-2018-1712 IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery
Description
IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| API Connect 5.0 | 5.0.0.0 → 5.0.8.3 | Pas de correctif indiqué |